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Amendment to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims : 

1 . (previously presented) A method of managing security keys in a wireless 
local area network having a mobile terminal, an access point and a server, the 
method comprising the steps of: 

obtaining first and second certificates from a certificate authority; 

associating the mobile terminal with the access point; 

using a certificate authority certificate, first certificate and private key with 
Internet Key Exchange (IKE) to generate a WLAN link level key and mutually 
authenticating the mobile terminal and the access point using the IKE; and 

using a certificate authority certificate, second certificate and private key with 
Internet Key Exchange (IKE) to generate IPsec authentication, encryption and 
decryption keys for data packets transferred between the mobile terminal and the 
server. 

2. (original) The method recited in claim 1 , wherein the certificate authority 
certificate, private key, and the first and second certificates are stored in the mobile 
terminal. 

3. (original) The method recited in claim 2, wherein the certificate authority 
certificate, private key, and the first and second certificates are stored in the mobile 
terminal at the time of manufacture of the mobile terminal. 
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4. (original) The method recited in claim 1, wherein the mobile terminal 
generates an authentication header for transferred data packets utilizing the IPsec 
encryption key. 

5. (original) The method recited in claim 1, wherein the server authenticates 
and decrypts data packets transferred from the mobile terminal utilizing the IPsec 
authentication and decryption keys. 

6. (original) The method recited in claim 5, wherein the data packets are 
transferred from the mobile terminal to the access point using WLAN link level 
encryption in addition to the IPsec encryption. 

7. (previously presented) The method recited in claim 6, wherein the WLAN 
link level encryption comprises Wired Equivalent Privacy (WEP) encryption. 

8. (original) The method recited in claim 1 , wherein the data packets are 
transferred from the mobile terminal to the access point without using WLAN link 
level encryption. 

9. (original) The method recited in claim 8, wherein the mobile terminal 
forwards the IPsec authentication key to the access point. 

10. (original) The method recited in claim 9, wherein the access point 
authenticates data packets from the mobile terminal using the IPsec authentication 
key forwarded from the mobile terminal. 
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1 1 . (original) The method recited in claim 1 , wherein the mobile terminal 
sends an IPsec authenticated message to an access point as part of a MAC-level 
message of the wireless local area network. 

12-17. Cancelled (without disclaimer or prejudice). 



4 



